Static task
static1
Behavioral task
behavioral1
Sample
4802c121d126fde79ab4cd2e80a687a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4802c121d126fde79ab4cd2e80a687a8.exe
Resource
win10v2004-20231222-en
General
-
Target
4802c121d126fde79ab4cd2e80a687a8
-
Size
73KB
-
MD5
4802c121d126fde79ab4cd2e80a687a8
-
SHA1
af60328708bb632856a755e1c0feec74d059a866
-
SHA256
148b2ae8369bbb751302313a8d5128e25f9b349c83933c5225a4a52dce649673
-
SHA512
43ff75abc3a7c82fbe90167b23c183fc9efe79e0ac9d415691bbd9ce35a13201d8753f16626502998a20124144dd6728a8313ad4aa6fe04c8aa67b250f86c112
-
SSDEEP
1536:F0IyEdg/narOmKc/kotyoqAc+mr58IsXe//ADIesVa2k:F0Ij0arxKIhyoqAc358LXe//KyV1k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4802c121d126fde79ab4cd2e80a687a8
Files
-
4802c121d126fde79ab4cd2e80a687a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
PEp0 Size: - Virtual size: 492KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEp1 Size: 72KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE